Unknown Relevanssi vulnerabilities

CVE-2025-14719 [MEDIUM] CWE-89 CVE-2025-14719: The Relevanssi WordPress plugin before 4.26.0, Relevanssi Premium WordPress plugin before 2.29.0 do The Relevanssi WordPress plugin before 4.26.0, Relevanssi Premium WordPress plugin before 2.29.0 do not sanitize and escape a parameter before using it in a SQL statement, allowing contributor and above roles to perform SQL injection attacks

CVE-2024-9021 [MEDIUM] CWE-79 CVE-2024-9021: In the process of testing the Relevanssi WordPress plugin before 4.23.1, a vulnerability was found In the process of testing the Relevanssi WordPress plugin before 4.23.1, a vulnerability was found that allows you to implement Stored XSS on behalf of the Contributor+ by embedding malicious script, which entails account takeover backdoor

CVE-2023-7199 [MEDIUM] CWE-639 CVE-2023-7199: The Relevanssi WordPress plugin before 4.22.0, Relevanssi Premium WordPress plugin before 2.25.0 all The Relevanssi WordPress plugin before 4.22.0, Relevanssi Premium WordPress plugin before 2.25.0 allows any unauthenticated user to read draft and private posts via a crafted request